Static task
static1
Behavioral task
behavioral1
Sample
8ba781cb712906c831d5cd6b7631aeb14fa0655173e10c4537a599105a8b6463.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
8ba781cb712906c831d5cd6b7631aeb14fa0655173e10c4537a599105a8b6463.exe
Resource
win10v2004-20231023-en
General
-
Target
8ba781cb712906c831d5cd6b7631aeb14fa0655173e10c4537a599105a8b6463
-
Size
13.8MB
-
MD5
0affd0a2a3651d3a82c95139c03f83df
-
SHA1
71d35de0d96c94c87b72231055318a60e7138e97
-
SHA256
8ba781cb712906c831d5cd6b7631aeb14fa0655173e10c4537a599105a8b6463
-
SHA512
afd7a27d100af66ec2ae5d43d6ccc17e5eccd26444bca479739e753e823a72c61596ee7d8853402f52859bc5eb7b4dbb090c3ef816f525161188268450cdd9f7
-
SSDEEP
393216:cFe88cUt+W/Wn57Mcjpqe+WlC+pH3AO4gRx:FcUtkn5/jcAC943
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ba781cb712906c831d5cd6b7631aeb14fa0655173e10c4537a599105a8b6463
Files
-
8ba781cb712906c831d5cd6b7631aeb14fa0655173e10c4537a599105a8b6463.exe windows:6 windows x86
f145a9a3f9f6d317249cbf6c51126ed7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceFrequency
user32
SetPropW
gdi32
CreateCompatibleDC
msimg32
AlphaBlend
winspool.drv
OpenPrinterW
advapi32
RegEnumKeyExW
shell32
ShellExecuteW
comctl32
InitCommonControlsEx
shlwapi
PathStripToRootW
uxtheme
DrawThemeBackground
ole32
OleDestroyMenuDescriptor
oleaut32
SafeArrayDestroy
oledlg
OleUIBusyW
gdiplus
GdipCreateFromHDC
oleacc
AccessibleObjectFromWindow
imm32
ImmReleaseContext
winmm
PlaySoundW
ws2_32
inet_addr
Sections
.text Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 537KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 2.2MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 13KB - Virtual size: 13KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 378KB - Virtual size: 378KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ